Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e32372e302f32342d3234203d3e203632333930.roa
File: 33312e362e32372e302f32342d3234203d3e203632333930.roa (raw, json)
Hash identifier: CmpFlnh/kYnOgJqemM1m4IBZyNuENXqRswnDMQUAvvw=
Subject key identifier: F8:3F:AE:68:77:24:37:3A:23:11:FC:86:C7:E9:06:9C:F0:32:9C:9B
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 6191FBCA7E2D59D028B6C5B311D08CD7717B6C91
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e32372e302f32342d3234203d3e203632333930.roa
Signing time: Sat 10 Feb 2024 19:37:06 +0000
ROA not before: Sat 10 Feb 2024 19:32:06 +0000
ROA not after: Sat 08 Feb 2025 19:37:06 +0000
asID: 62390
IP address blocks: 31.6.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.mft
rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:91:fb:ca:7e:2d:59:d0:28:b6:c5:b3:11:d0:8c:d7:71:7b:6c:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Feb 10 19:32:06 2024 GMT
Not After : Feb 8 19:37:06 2025 GMT
Subject: CN=F83FAE687724373A2311FC86C7E9069CF0329C9B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:58:77:70:19:90:0f:12:a5:4a:93:05:04:f0:
37:15:30:5d:3d:1a:67:de:b9:22:0d:58:5c:bb:d3:
c9:eb:12:c5:29:de:c1:af:53:a5:b0:cd:5d:b8:6e:
96:65:87:08:ef:65:02:05:0c:65:e2:b5:9d:44:36:
e3:8e:b6:9d:0f:52:60:61:e8:07:0c:e4:56:be:15:
ac:90:c8:fd:44:ed:69:9b:25:c5:8d:c0:8d:52:dc:
46:5b:1b:9b:e4:06:30:07:fc:64:ff:96:93:1a:56:
d6:7a:2c:c8:da:e2:88:bc:db:01:21:e9:47:3d:ee:
3c:8d:e1:a2:b9:42:73:b5:ef:53:69:67:58:39:02:
40:93:87:e3:33:dc:3d:2f:c2:27:c6:75:c7:74:17:
1c:5c:7f:c6:d6:01:66:e0:dc:4e:c8:1d:1d:09:ee:
25:13:e5:5e:3a:de:9b:cb:6a:1e:c1:97:2f:4d:88:
dc:24:be:36:a1:81:3f:b0:23:5f:42:5e:9c:a7:68:
ac:78:21:00:a6:55:3d:85:06:b7:64:cb:2c:dc:c3:
2a:7d:02:6a:77:a6:28:a6:83:09:24:90:de:93:ad:
22:d7:2a:59:fa:16:ce:b6:bc:86:6f:bd:00:d0:22:
4d:e3:1c:31:42:2d:0f:95:b0:ad:41:6c:35:8c:a1:
48:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:3F:AE:68:77:24:37:3A:23:11:FC:86:C7:E9:06:9C:F0:32:9C:9B
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e32372e302f32342d3234203d3e203632333930.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.27.0/24
Signature Algorithm: sha256WithRSAEncryption
39:f7:a6:7f:05:92:25:7f:71:55:93:0f:fd:3c:96:04:74:51:
a8:72:66:58:d1:9e:58:d5:d6:0f:42:17:a0:40:4c:93:9d:7e:
73:80:22:3b:30:c2:63:10:60:e2:7f:00:1c:53:e9:76:c7:ce:
fb:1b:ba:7c:6f:08:0c:b0:fc:a5:6d:34:75:2c:a2:59:29:18:
0c:a4:4c:15:65:95:11:ab:e4:ff:3b:6a:72:fc:cf:8f:bf:69:
2c:94:25:96:73:0c:a4:2a:32:44:bb:49:86:bf:7d:85:0d:d6:
34:97:de:ee:67:87:c8:23:9e:47:3b:e8:5a:d0:80:3d:ca:02:
c5:f9:62:36:6c:24:b3:1c:13:ea:64:8e:86:fc:3a:01:01:a8:
69:29:1f:90:68:0c:62:dc:a7:a8:0d:fb:68:ed:3b:71:54:57:
f8:a2:dc:25:5a:27:2e:5d:f0:ab:cc:f6:69:83:09:4d:3b:02:
4e:aa:4b:10:47:3a:47:54:13:64:a3:40:fe:c3:43:1f:a7:34:
42:29:e7:51:3e:70:80:2e:db:82:d7:e7:89:b7:4c:8e:2b:f5:
28:90:2e:f0:90:dc:00:fc:d5:89:e9:72:ea:74:87:42:a3:0b:
08:e1:42:d2:3a:4b:a3:f7:eb:28:da:ce:14:2e:dd:26:15:af:
a6:d9:9c:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 18:48:53 2024 by rpki-client on console-fra.rpki-client.org